Rewarding web application security research
The latest news and insights from Google on security and safety on the Internet Oscar said... This is a really good approach. It rewards people for pushing the boundaries of the software and finding issues with it. I wish the Diaspora guys had something like this in place. November 1, 2010 at 4:00 PM Unknown said... Excellent effort by Google (clap clap clap) November 1, 2010 at 4:49 PM Unknown sa
Reducing XSS by way of Automatic Context-Aware Escaping in Template Systems
The latest news and insights from Google on security and safety on the Internet miked said... I like django solution - all data substitution are dangerouse, but when you need html you place 'safe' filter, and now you start really thinking safe it or not April 1, 2009 at 7:49 AM jwilliams said... For some additional background on context sensitive escaping in HTML, check out OWASP's XSS Prevention
Meet ratproxy, our passive web security assessment tool
The latest news and insights from Google on security and safety on the Internet Anonymous said... This comment has been removed by a blog administrator. July 7, 2008 at 12:13 PM Unknown said... Spammer >:-@ July 8, 2008 at 9:24 AM Dinesh Venkatesan said... This is an excellent initiative. Hats off!! July 15, 2008 at 4:54 AM Tomcat Sabre said... Great product. WHere can I find information on the cu
Automating web application security testing
The latest news and insights from Google on security and safety on the Internet Philipp Lenssen said... Thanks for the explanations. In a future post, can you explain how you limit the damage an XSS exploit cookie stealer on *.Google.com can do? E.g. if an XSS hole is found at groups.google.com (these things have been found in the past), how do you ensure it can't easily spread to mail.google.com
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
